Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37322e302f32332d3233203d3e20323635333032.roa
File:                     3136382e3132312e37322e302f32332d3233203d3e20323635333032.roa (raw, json)
Hash identifier:          8HSaMJLNIpHpFvsRP+rJbkuqPooqkIc76jbe9bzrvVQ=
Subject key identifier:   5C:C5:4B:ED:E3:9A:F2:EB:1F:27:62:E1:08:D1:51:2F:9C:62:F6:5A
Certificate issuer:       /CN=C54586D44647014E47C52F3A3F2184006D2B17C3
Certificate serial:       1D962F79F4F9C9DD14D620BC57293566E38273DD
Authority key identifier: C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37322e302f32332d3233203d3e20323635333032.roa
Signing time:             Mon 04 Jul 2022 17:09:02 +0000
ROA not before:           Mon 04 Jul 2022 17:04:02 +0000
ROA not after:            Mon 03 Jul 2023 17:09:02 +0000
asID:                     265302
IP address blocks:        168.121.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:96:2f:79:f4:f9:c9:dd:14:d6:20:bc:57:29:35:66:e3:82:73:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54586D44647014E47C52F3A3F2184006D2B17C3
        Validity
            Not Before: Jul  4 17:04:02 2022 GMT
            Not After : Jul  3 17:09:02 2023 GMT
        Subject: CN=5CC54BEDE39AF2EB1F2762E108D1512F9C62F65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:cf:c2:2c:a5:d9:86:d5:fa:90:8c:c8:b5:
                    cc:8a:06:6a:ea:24:58:76:d9:b6:c7:6b:25:07:95:
                    e6:ca:37:66:80:ef:21:2c:e0:a0:4d:3f:0c:17:fa:
                    3e:79:66:91:d7:2b:80:b1:d3:33:a4:bb:ab:f8:f1:
                    38:83:27:79:9c:bf:7c:f3:e2:7a:cc:18:d1:44:4a:
                    68:12:84:75:04:2e:76:bb:5d:04:9f:ad:08:54:94:
                    09:9f:9a:64:a1:d8:8c:6d:4e:f1:2e:81:d5:d7:91:
                    4e:2d:95:54:59:88:4e:9f:bb:b0:a3:d7:78:25:d7:
                    cf:6b:fa:8c:ad:97:58:ad:43:d2:15:f9:75:3c:81:
                    1c:39:7d:56:38:81:1c:fe:f9:bd:36:bf:73:a3:e0:
                    72:9b:2a:36:1a:f0:9c:67:f7:e9:df:37:67:c9:cb:
                    4e:b7:6d:01:50:87:be:4b:03:92:1f:ea:8c:fc:11:
                    49:08:bb:88:5b:de:ff:f4:f8:0a:2e:02:89:e9:0a:
                    88:61:b8:be:4f:7b:a6:83:cf:42:c4:28:33:1e:6f:
                    61:68:45:fd:55:e2:17:3e:68:05:ee:ce:27:fc:1d:
                    38:13:b2:c5:1d:ec:cc:1f:6a:8e:73:4c:14:3e:c8:
                    ba:4e:14:27:9f:db:c2:6a:98:f7:df:1b:b8:7a:35:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:4B:ED:E3:9A:F2:EB:1F:27:62:E1:08:D1:51:2F:9C:62:F6:5A
            X509v3 Authority Key Identifier:
                keyid:C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/C54586D44647014E47C52F3A3F2184006D2B17C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37322e302f32332d3233203d3e20323635333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:ec:81:87:c9:c2:fd:1c:0a:7b:b0:db:0c:e7:bd:17:23:
         aa:f6:ff:c9:0a:24:f7:7d:83:e1:5c:9d:11:ea:0c:17:cf:7c:
         49:eb:07:d0:c7:8c:ec:17:59:d3:95:e6:f8:09:14:7e:42:3f:
         1d:8a:cc:6c:d8:58:86:5a:8a:bc:77:d7:5f:7a:8e:8e:c9:84:
         9e:eb:7d:90:21:b3:a5:e4:bc:c1:34:b3:6c:e7:99:5c:5a:63:
         e3:18:7a:b7:9f:ba:b7:89:c1:95:8c:a7:a1:8c:54:2e:db:90:
         de:95:93:5e:eb:a1:b0:20:4d:74:ba:61:2d:6e:b9:28:ac:58:
         70:e7:d3:c2:c3:fa:98:92:d9:c4:aa:b5:28:02:3a:6f:73:0d:
         2b:a9:e6:99:33:6e:32:6a:2f:ac:ac:24:e3:fb:02:0c:c9:93:
         9b:db:fe:9d:b4:df:77:41:93:1d:3d:8c:47:c6:b4:cf:34:96:
         65:af:59:07:f7:0a:09:59:e5:e3:0e:e2:2a:46:fa:4c:79:12:
         3a:40:1f:ad:0c:8c:48:d3:7c:cc:7d:98:3b:c8:70:7a:7f:27:
         97:d4:e0:13:48:c6:82:a7:6f:a4:df:b2:74:57:cf:b8:d0:b8:
         85:a4:dd:71:7c:23:e7:ba:1d:04:fa:44:99:46:71:5e:b3:cf:
         8e:57:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:52 2025 by rpki-client